Secure visual and computational boundary for a subset of resources on a computing machine

A non-transitory machine-readable medium storing instructions that, when executed by processing circuitry, cause the processing circuitry to perform operations comprising:

• storing, at a computing machine, multiple supervised computing resources and multiple additional computing resources, wherein the multiple supervised computing resources are associated with a security policy;
• causing, via a native computing environment of the computing machine, a display unit coupled with the computing machine to display simultaneously, all or a portion of a visual representation of a specified supervised computing resource and all or a portion of a visual representation of a specified additional computing resource, wherein the visual representation of the specified supervised computing resource comprises data generated during execution of software associated with the specified supervised computing resource, wherein the visual representation of the specified additional computing resource comprises data generated during execution of software associated with the specified additional computing resource;
• applying security rules from the security policy to the specified supervised computing resource, wherein applying the security rules comprises at least facilitating tracking, by a supervision service, activity of the computing machine with respect to the specified supervised computing resource;
• forgoing facilitating tracking, by the supervision service, activity of the computing machine with respect to the specified additional computing resource and with respect to activity on the computing machine that is not associated with one or more of the multiple supervised computing resources;
• and
• displaying, in association with the visual representation of the specified supervised computing resource, a visual indicator indicating that tracking is ongoing, the visual indicator comprising a border for the visual representation of the specified supervised computing resource, the border occupying points outside the visual representation of the specified supervised computing resource that are within a distance of n or fewer pixels from the visual representation of the specified supervised computing resource unless those pixels are occupied by visual representations of other computing resources that are more dominant than the specified supervised computing resource in a computing resource stack, wherein n is a positive integer.

A system comprising:

• processing circuitry;
• and
• a memory storing instructions that, when executed by processing circuitry, cause the processing circuitry to perform operations comprising:
• storing, at a computing machine, multiple supervised computing resources and multiple additional computing resources, wherein the multiple supervised computing resources are associated with a security policy;
• causing, via a native computing environment of the computing machine, a display unit coupled with the computing machine to display simultaneously, all or a portion of a visual representation of a specified supervised computing resource and all or a portion of a visual representation of a specified additional computing resource, wherein the visual representation of the specified supervised computing resource comprises data generated during execution of software associated with the specified supervised computing resource, wherein the visual representation of the specified additional computing resource comprises data generated during execution of software associated with the specified additional computing resource;
• applying security rules from the security policy to the specified supervised computing resource, wherein applying the security rules comprises at least facilitating tracking, by a supervision service, activity of the computing machine with respect to the specified supervised computing resource;
• forgoing facilitating tracking, by the supervision service, activity of the computing machine with respect to the specified additional computing resource and with respect to activity on the computing machine that is not associated with one or more of the multiple supervised computing resources;
• and
• displaying, in association with the visual representation of the specified supervised computing resource, a visual indicator indicating that tracking is ongoing, the visual indicator comprising a border for the visual representation of the specified supervised computing resource, the border occupying points outside the visual representation of the specified supervised computing resource that are within a distance of n or fewer pixels from the visual representation of the specified supervised computing resource unless those pixels are occupied by visual representations of other computing resources that are more dominant than the specified supervised computing resource in a computing resource stack, wherein n is a positive integer.